myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin, CVE-2026-61968

CVE, Research URL: CVE-2026-61968
Home page URL: Security reports for myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin
Application: myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin
Published on: Jul 13, 2026
Research Description: Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 3.1.2.
Affected versions: max 3.1.2.
Status: vulnerable

myCred &#8211; Points, Rewards, Gamification, Ranks, Badges &amp; Loyalty Plugin, CVE-2026-61968